Exploiting the Otherwise Non-Exploitable on Windows

This paper describes a technique that can be applied in certain situations to gain arbitrary code execution through software bugs that would not otherwise be exploitable, such as NULL pointer dereferences. PDF Link